$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json) Hash identifier: q5jEwpgwhAZOaE6dDlD8aJzOj4UPt5mi0zWcaJ+KctA= Subject key identifier: 4F:B0:AE:60:E4:BB:9B:0C:12:B5:BA:7F:B6:52:8B:2A:5D:A1:22:A1 Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Certificate serial: 0F762C692A628EB6EE52D32F2B8D235C139A2007 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft Manifest number: 95 Signing time: Sun 15 Jun 2025 11:41:08 +0000 Manifest this update: Sun 15 Jun 2025 11:36:08 +0000 Manifest next update: Wed 18 Jun 2025 15:36:08 +0000 Files and hashes: 1: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: uP3Lxf8p7LpviEyknQjtinyqvEW0qcTjM+HY0BAA+2c=) 2: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: SpCj/0V4xZeCOzNAs0HZjcpYz4fEpWdh6tmCDOFL3l0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:76:2c:69:2a:62:8e:b6:ee:52:d3:2f:2b:8d:23:5c:13:9a:20:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Validity Not Before: Jun 15 11:36:08 2025 GMT Not After : Jun 18 15:36:08 2025 GMT Subject: CN=4FB0AE60E4BB9B0C12B5BA7FB6528B2A5DA122A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:3a:bf:42:1b:dd:ad:8d:de:f2:b7:b6:4a: 6d:eb:c9:58:d4:82:73:79:4e:78:00:10:2e:07:f3: 13:97:80:22:86:07:0b:d6:08:38:f0:1f:eb:a7:bf: ce:b8:13:c1:73:c6:35:c4:b0:5b:76:78:03:71:33: 13:a6:ae:78:e6:78:2a:72:93:36:7c:ec:3e:be:58: 0e:78:c9:04:80:83:62:f8:c2:5f:45:5b:58:c4:b2: 5c:ea:df:ae:64:c7:3a:ba:6c:f0:4e:58:2a:f2:1b: 1f:a8:06:d8:e7:6c:3b:13:cc:be:f1:1c:d6:a0:b2: 7c:92:b0:83:08:91:ec:17:f1:6a:d8:c1:47:66:68: df:78:e7:4c:9c:a4:af:1b:3e:b8:8e:40:a1:aa:ae: cd:e5:6a:01:a8:89:60:8a:19:41:e7:fa:ff:be:80: b2:77:04:9b:b8:5e:bb:95:d1:61:9b:1a:dd:8e:9c: 8d:da:71:61:6c:4b:be:4d:a7:00:9f:d9:d8:62:bf: e0:da:11:2d:30:4c:4e:1a:30:65:15:17:35:21:db: 11:c5:af:c9:e2:16:ae:3b:37:7c:11:94:5e:27:4b: a0:3b:2e:8c:68:da:9c:8b:77:ab:ef:93:c8:ef:04: 85:e9:f8:59:b6:27:cb:f8:fb:66:96:97:81:a7:94: 97:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B0:AE:60:E4:BB:9B:0C:12:B5:BA:7F:B6:52:8B:2A:5D:A1:22:A1 X509v3 Authority Key Identifier: keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f2:79:ef:c1:33:51:53:70:26:4c:8f:ce:1d:89:da:5c:a0: 8f:f3:87:4f:20:d4:0e:e5:a6:bd:7c:71:ff:8d:08:c2:36:b0: db:58:dc:62:f5:43:1f:c1:7a:b7:91:e6:07:4c:da:ba:8c:56: 1f:65:94:c7:73:f3:84:c8:b8:0a:bf:da:ff:95:54:d7:0a:05: 41:28:87:57:7f:eb:0c:f1:92:1b:72:68:84:9e:f0:1e:5b:f1: 19:ca:6b:f6:5e:e0:d5:7a:b9:e6:c3:b0:04:86:a7:d4:51:1e: 35:84:51:88:26:41:4c:83:74:8d:9a:e4:6c:c6:12:68:d1:9d: bd:e5:aa:6b:15:3e:f6:cc:1d:d6:24:f0:94:96:e1:07:58:49: aa:f8:d7:11:2f:8f:6e:a8:08:b7:d3:ba:1f:80:e3:2b:50:bf: 28:f8:67:29:1d:9f:d9:4e:39:1a:f2:95:0e:06:18:84:01:2e: 8b:38:08:03:81:cf:5e:80:2e:2e:52:82:13:c8:16:e8:f0:47: aa:b4:fe:15:3b:1b:aa:33:df:7d:bc:88:f2:76:90:31:50:80: 69:b4:47:91:34:40:6c:b0:7d:96:12:ac:c0:d7:b1:d1:53:3c: ba:be:27:30:c0:f0:4e:6f:a6:fc:51:1a:37:91:0f:22:5d:83: eb:6c:0e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3YsaSpijrbuUtMvK40jXBOaIAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdE OTcyQzZGNjAeFw0yNTA2MTUxMTM2MDhaFw0yNTA2MTgxNTM2MDhaMDMxMTAvBgNV BAMTKDRGQjBBRTYwRTRCQjlCMEMxMkI1QkE3RkI2NTI4QjJBNURBMTIyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkjq/QhvdrY3e8re2Sm3ryVjU gnN5TngAEC4H8xOXgCKGBwvWCDjwH+unv864E8FzxjXEsFt2eANxMxOmrnjmeCpy kzZ87D6+WA54yQSAg2L4wl9FW1jEslzq365kxzq6bPBOWCryGx+oBtjnbDsTzL7x HNagsnySsIMIkewX8WrYwUdmaN9450ycpK8bPriOQKGqrs3lagGoiWCKGUHn+v++ gLJ3BJu4XruV0WGbGt2OnI3acWFsS75NpwCf2dhiv+DaES0wTE4aMGUVFzUh2xHF r8niFq47N3wRlF4nS6A7Loxo2pyLd6vvk8jvBIXp+Fm2J8v4+2aWl4GnlJftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7CuYOS7mwwStbp/tlKLKl2hIqEwHwYDVR0j BBgwFoAUuRHTTy6AFA1jrgL0y+cZ59lyxvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMC9COTExRDM0RjJF ODAxNDBENjNBRTAyRjRDQkU3MTlFN0Q5NzJDNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdEOTcy QzZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5 RTdEOTcyQzZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvyee/BM1FTcCZMj84didpcoI/zh08g1A7l pr18cf+NCMI2sNtY3GL1Qx/BereR5gdM2rqMVh9llMdz84TIuAq/2v+VVNcKBUEo h1d/6wzxkhtyaISe8B5b8RnKa/Ze4NV6uebDsASGp9RRHjWEUYgmQUyDdI2a5GzG EmjRnb3lqmsVPvbMHdYk8JSW4QdYSar41xEvj26oCLfTuh+A4ytQvyj4Zykdn9lO ORrylQ4GGIQBLos4CAOBz16ALi5SghPIFujwR6q0/hU7G6oz3328iPJ2kDFQgGm0 R5E0QGywfZYSrMDXsdFTPLq+JzDA8E5vpvxRGjeRDyJdg+tsDoQ= -----END CERTIFICATE-----Generated at Tue Jun 17 09:44:17 2025 by rpki-client